Page 1 of 1

RoR launcher flagged as a Trojan

Posted: Thu May 21, 2020 11:37 pm
by Findy210
Has anyone had the launcher flagged as trojan:win32/occamy.c by their PC? Is there a solution to remove the Trojan? If not, is it 'safe' to accept the Trojan?

Cheers again

Re: RoR launcher flagged as a Trojan

Posted: Thu May 21, 2020 11:44 pm
by Malael
Windows isn't allowing me to open the launcher.

No idea what I can do.

Re: RoR launcher flagged as a Trojan

Posted: Thu May 21, 2020 11:45 pm
by wargrimnir
Notes about Antivirus programs, Firewalls, Hardware Routers, and other security programs

Some of these can be more aggressive than others, and in particular the RORLauncher has been flagged in the past. Partially because this is not a well known application in the wild, and partially because of how it works.
The Launcher manipulates objects in memory to make the game work with our server.
Some aggressive antiviruses automatically deem this to be virus-like behavior.
They check with their database of approved applications when they see this, and if they don't find our application in there, it gets a Generic flag and is sometimes blocked or damaged.

Because of this, we have to recommend that when you download with the Torrent, that you have your security disabled, and then whitelist the folder before turning it all back on.

We have repeatedly reached out to many AV companies and databases, all of which who responded accepted it as clean, and many others simply never responded leaving it with that Generic tag.

As you can see here VirusTotal which is a very common database, is showing the launcher as clean in the vast majority of AV's. However, old definitions even from a company that doesn't have us flagged, can still cause problems.

TL;DR - The RORLauncher is safe. The torrent is safe. Please disable your AV BEFORE downloading, and whitelist the folder BEFORE turning it back on to prevent any potential issues.